At 5:21pm ET on June 12, Anthropic received a US government directive ordering it to suspend access to Fable 5 and Mythos 5 — its two frontier models — for any foreign national, whether located inside or outside the United States, including foreign-national Anthropic employees. To comply, Anthropic disabled both models for every customer worldwide, citing the impossibility of segmenting access by nationality on the timeline the order required. Every other Anthropic model, including the older Claude Opus and Sonnet lines, remains available.
The order traces back to a jailbreak demonstration. Another company showed it could direct Mythos 5 to read a target codebase and surface software vulnerabilities — a capability the administration treated as a national-security-relevant uplift in offensive cyber. Anthropic publicly disagrees with the framing, calling the demonstration a narrow exploit that unlocked one specific cybersecurity behavior, not a universal bypass of the model's safeguards. The company says it is working with Commerce to restore access, and characterizes the situation as a misunderstanding of how the jailbreak generalizes.
This is the first time a US frontier-model export control has been triggered by a behavioral demonstration rather than by parameter count or compute thresholds — a meaningful shift. Earlier export restrictions targeted chips and training runs above defined FLOP ceilings; this one targets a deployed model based on what a third party showed it could do. It also caps a difficult six months for Anthropic's government relationship: the February Pentagon contract dispute, the call for a coordinated frontier pause in early June, and now a Commerce action against the company's flagship models.
For learners: this is a live case study in how AI safety policy actually gets made. The lever the government pulled was not new legislation but existing export-control authority, applied to model access the way it has historically been applied to chips. If you are studying AI governance, watch what happens next — whether Commerce defines a generalized standard for behavioral triggers, whether other labs change red-team disclosure practices to avoid the same outcome, and whether 'jailbreak demonstration' becomes a recognized category in export law.